📦

tempo

Vendor: grafana

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 0.01% Exploit Prob.
Latest CVE CVE-2026-28377 Mar 26

Security Vulnerability Index

Page 1 / 1
7.5 CVSS
CVE-2026-28377

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to william_goodfellow for reporting this vulnerability.

EPSS: 0.01%